I do not have screenshots to post. I was just emailed info telling me what the phone and PC MACs were on the port and that the 3rd MAC was there. No proof where it came from, just telling me that their switches don't add MACs at random and since the port dropped while the tech was using Carbon Copy...it was to blame.
It seems to be happening more frequently, but not everytime. Each time they do send me the MAC address and it's totally random and not related to any machine plugged into the network. It's funny that I always have to defend Altiris...it is immediately the problem when there is an issue with a switch or the network. Thing is...it never has beenthe issue (and no apology given either).
Thanks for the response. I'll wait a day or two to see if there are anymore before I close and confront.